{"action":"created","issue":{"url":"https://api.github.com/repos/kubernetes/community/issues/193","repository_url":"https://api.github.com/repos/kubernetes/community","labels_url":"https://api.github.com/repos/kubernetes/community/issues/193/labels{/name}","comments_url":"https://api.github.com/repos/kubernetes/community/issues/193/comments","events_url":"https://api.github.com/repos/kubernetes/community/issues/193/events","html_url":"https://github.com/kubernetes/community/pull/193","id":196402001,"number":193,"title":"add discussion about pod isolation in propagation design","user":{"login":"lvlv","id":10374180,"avatar_url":"https://avatars.githubusercontent.com/u/10374180?v=3","gravatar_id":"","url":"https://api.github.com/users/lvlv","html_url":"https://github.com/lvlv","followers_url":"https://api.github.com/users/lvlv/followers","following_url":"https://api.github.com/users/lvlv/following{/other_user}","gists_url":"https://api.github.com/users/lvlv/gists{/gist_id}","starred_url":"https://api.github.com/users/lvlv/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/lvlv/subscriptions","organizations_url":"https://api.github.com/users/lvlv/orgs","repos_url":"https://api.github.com/users/lvlv/repos","events_url":"https://api.github.com/users/lvlv/events{/privacy}","received_events_url":"https://api.github.com/users/lvlv/received_events","type":"User","site_admin":false},"labels":[{"id":486032367,"url":"https://api.github.com/repos/kubernetes/community/labels/cncf-cla:%20yes","name":"cncf-cla: yes","color":"c2e0c6","default":false}],"state":"open","locked":false,"assignee":{"login":"euank","id":2147649,"avatar_url":"https://avatars.githubusercontent.com/u/2147649?v=3","gravatar_id":"","url":"https://api.github.com/users/euank","html_url":"https://github.com/euank","followers_url":"https://api.github.com/users/euank/followers","following_url":"https://api.github.com/users/euank/following{/other_user}","gists_url":"https://api.github.com/users/euank/gists{/gist_id}","starred_url":"https://api.github.com/users/euank/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/euank/subscriptions","organizations_url":"https://api.github.com/users/euank/orgs","repos_url":"https://api.github.com/users/euank/repos","events_url":"https://api.github.com/users/euank/events{/privacy}","received_events_url":"https://api.github.com/users/euank/received_events","type":"User","site_admin":false},"assignees":[{"login":"euank","id":2147649,"avatar_url":"https://avatars.githubusercontent.com/u/2147649?v=3","gravatar_id":"","url":"https://api.github.com/users/euank","html_url":"https://github.com/euank","followers_url":"https://api.github.com/users/euank/followers","following_url":"https://api.github.com/users/euank/following{/other_user}","gists_url":"https://api.github.com/users/euank/gists{/gist_id}","starred_url":"https://api.github.com/users/euank/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/euank/subscriptions","organizations_url":"https://api.github.com/users/euank/orgs","repos_url":"https://api.github.com/users/euank/repos","events_url":"https://api.github.com/users/euank/events{/privacy}","received_events_url":"https://api.github.com/users/euank/received_events","type":"User","site_admin":false}],"milestone":null,"comments":17,"created_at":"2016-12-19T12:26:41Z","updated_at":"2017-01-19T19:10:16Z","closed_at":null,"pull_request":{"url":"https://api.github.com/repos/kubernetes/community/pulls/193","html_url":"https://github.com/kubernetes/community/pull/193","diff_url":"https://github.com/kubernetes/community/pull/193.diff","patch_url":"https://github.com/kubernetes/community/pull/193.patch"},"body":""},"comment":{"url":"https://api.github.com/repos/kubernetes/community/issues/comments/273868736","html_url":"https://github.com/kubernetes/community/pull/193#issuecomment-273868736","issue_url":"https://api.github.com/repos/kubernetes/community/issues/193","id":273868736,"user":{"login":"kfox1111","id":1513154,"avatar_url":"https://avatars.githubusercontent.com/u/1513154?v=3","gravatar_id":"","url":"https://api.github.com/users/kfox1111","html_url":"https://github.com/kfox1111","followers_url":"https://api.github.com/users/kfox1111/followers","following_url":"https://api.github.com/users/kfox1111/following{/other_user}","gists_url":"https://api.github.com/users/kfox1111/gists{/gist_id}","starred_url":"https://api.github.com/users/kfox1111/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/kfox1111/subscriptions","organizations_url":"https://api.github.com/users/kfox1111/orgs","repos_url":"https://api.github.com/users/kfox1111/repos","events_url":"https://api.github.com/users/kfox1111/events{/privacy}","received_events_url":"https://api.github.com/users/kfox1111/received_events","type":"User","site_admin":false},"created_at":"2017-01-19T19:10:16Z","updated_at":"2017-01-19T19:10:16Z","body":"I was on the fence on it being automatically always shared. there's a reason for all the shared flags in the kernel, so exposing them and letting the user pick seems like a much safer way to go.\r\n\r\nI think it may be such a complex problem though to recover from though that maybe its in the same vain as recovering a pod from having privilege. it could potentially mess itself or the system up so badly that it won't ever recover. Maybe we just need to accept that as a limitation? Keeping shared as a flag rather then always happen though minimizes the risk of it.\r\n\r\nFor the openstack neutron use case, I don't think any recovery should ever be performed anyway. the ip netns's that are created should not be cleaned up ever when the pod restarts. The next pod to take its place needs the same state as the previous pod had, or it will break badly."}}
{"actor":{"display_login":"kfox1111"}}